Bug 57237 - ucs_registerLDAPExtension doesn't register schema from 76univention-sudo-ldap.inst
ucs_registerLDAPExtension doesn't register schema from 76univention-sudo-ldap...
Status: RESOLVED MOVED
Product: UCS
Classification: Unclassified
Component: LDAP
UCS 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2024-04-25 12:59 CEST by Finn David
Modified: 2024-04-25 17:30 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.034
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2024040221000173
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Finn David univentionstaff 2024-04-25 12:59:53 CEST
https://help.univention.com/t/cool-solution-setup-sudo-with-ldap-on-multiserver-environments/21963


# -- environment --

UCS: 5.0-7 errata1032

repository/online/component/cool-solutions/unmaintained: yes
repository/online/component/cool-solutions/version: current
repository/online/component/cool-solutions: yes

/etc/apt/sources.list.d/20_ucs-online-component.list:deb https://updates.software-univention.de/5.0/maintained/component/ cool-solutions/all/
/etc/apt/sources.list.d/20_ucs-online-component.list:deb https://updates.software-univention.de/5.0/maintained/component/ cool-solutions/amd64/
/etc/apt/sources.list.d/20_ucs-online-component.list:deb https://updates.software-univention.de/5.0/unmaintained/component/ cool-solutions/all/
/etc/apt/sources.list.d/20_ucs-online-component.list:deb https://updates.software-univention.de/5.0/unmaintained/component/ cool-solutions/amd64/


# -- analysis --

On the test machine, the install script /usr/lib/univention-install/76univention-sudo-ldap.inst ran, but did not create the entry udm settings/ldapschema list --filter cn=sudo-ldap.


# -- actualise.log after package installation --

univention-sudo-ldap (4.0.0-1) wird eingerichtet ...
Calling joinscript 76univention-sudo-ldap.inst ...
2024-02-14 05:22:06.590663940+01:00 (in joinscript_init)
Joinscript 76univention-sudo-ldap.inst finished with exitcode 1


# -- manual run shows that the install script was already executed --

root@primary:~# univention-run-join-scripts --run-scripts 76univention-sudo-ldap
univention-run-join-scripts: runs all join scripts existing on local computer.
copyright (c) 2001-2023 Univention GmbH, Germany

Running pre-joinscripts hook(s):                           done
Running 76univention-sudo-ldap.inst                        skipped (already executed)
Running post-joinscripts hook(s):                          done


# -- confirmation in the index.txt --

root@primary:~# grep sudo-ldap /usr/lib/univention-install/.index.txt
univention-sudo-ldap v1 successful


# -- solution --

Delete entry from index.txt and run univention-run-join-scripts 76univention-sudo-ldap manually.
Comment 1 Erik Damrose univentionstaff 2024-04-25 13:21:16 CEST
git diff ucs-4.4/master ucs-5.0/master -- 76univention-sudo-ldap.inst

-> ucs_registerLDAPExtension calls were added, but the joinscript version was not increased. The code will not be called when updating to UCS 5, only on new installations
-> The ucs_registerLDAPExtension call for sudo-ldap.schema is missing "|| die"
Comment 2 Finn David univentionstaff 2024-04-25 15:22:39 CEST
Created issue in gitlab: https://git.knut.univention.de/univention/prof-services/cool-solutions/-/issues/23
Comment 3 Arvid Requate univentionstaff 2024-04-25 17:30:00 CEST
> Delete entry from index.txt and run univention-run-join-scripts 76univention-sudo-ldap manually.

Removing the entry from index.txt may be skipped when using the --force option:

univention-run-join-scripts --force --run-scripts 76univention-sudo-ldap.inst

Take care that --force must only be used with --run-scripts unless you want a full re-join.